Look up a DNS name and record type
A, AAAA, CNAME, MX, NS, TXT, SOA and SRV through Cloudflare DNS-over-HTTPS.
How to query
- Enter the exact name; verification TXT records can live under a subdomain.
- Select a type and press Lookup.
- Read the values and response code.
- For a recent change, compare authoritative data and other resolvers separately.
Common uses
- Inspect a host address.
- Check MX and TXT at the correct name.
- Inspect a CNAME alias.
- Observe the TTL returned by this resolver.
Frequently asked questions
Why do I see old data?
Cloudflare can return its own cached answer. Lowering TTL now does not erase an answer already cached.
What does an empty answer mean?
With code 0, no records were returned in Answer for that query. NXDOMAIN (3) reports a missing name or target; SERVFAIL (2) is a resolution failure.
Is the query private?
Cloudflare receives the name and your IP. Recent queries are stored in this browser and the link can contain the name. Read the policy before using sensitive targets.
What this lookup tells you
The result is one recursive resolver’s answer. It may be cached and does not replace an authoritative query or represent every network.
- Eight record types, one per query
- TTL in seconds
- DNS error code when reported by the resolver
- Direct browser request to Cloudflare
Free. No signup. Browser tools (subnet, JWT, password strength) run locally; lookup tools query public APIs (Cloudflare DoH, RDAP, certificate logs). Full per-tool breakdown at /methodology/.
Sources (3)
- Mockapetris, P. (1987). Domain Names — Implementation and Specification. RFC 1035, IETF.
- Hoffman, P., & McManus, P. (2018). DNS Queries over HTTPS (DoH). RFC 8484, IETF.
- Thomson, S., Huitema, C., Ksinant, V., & Souissi, M. (2003). DNS Extensions to Support IP Version 6. RFC 3596, IETF.
These are the IETF RFCs, NIST publications, and W3C standards the tool implements or queries. Locate them on the IETF Datatracker (datatracker.ietf.org) or the official standards body.
Related guides
- DNS changes: compare the source and recursive cachesRead Cloudflare DNS results without treating a TTL as a global propagation timer.
- Email Authentication — SPF, DKIM, and DMARC Explained ProperlyHow SPF, DKIM and DMARC actually work together to authenticate email, with the gotchas that break deliverability in production.
By Marco B. ·